This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer File: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer (raw, json) Hash identifier: TX7iSKjVHDda9DXCKTokRz+G27aMGnXZZ7rQP7bQU5U= Subject key identifier: B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15D3045150935B23D9FF8E6E576492 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50247 IP: 45.85.184.0/23 IP: 45.131.33.0 -- 45.131.34.255 IP: 91.218.240.0/24 IP: 91.224.142.0/23 IP: 109.95.88.0/21 IP: 109.196.80.0/20 IP: 109.197.36.0/23 IP: 109.207.103.0/24 IP: 185.178.236.0/22 IP: 2a0a:7080::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Feb 2026 15:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d3:04:51:50:93:5b:23:d9:ff:8e:6e:57:64:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4bdc376a159d05e2af97176a3eba8360e60d176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:95:4a:c6:55:5c:b0:9c:58:39:8b:50:51:ed: e0:fb:8a:3d:8d:4a:19:45:cc:ff:9e:98:03:54:1b: 14:1a:98:41:36:ca:0f:b3:e3:4e:f9:fd:2d:f0:3f: c5:d2:a6:4c:b3:1a:65:0e:63:33:61:ad:64:6b:99: 8b:11:bd:f2:d3:52:4e:7f:6b:44:c5:c9:89:46:dc: a1:e1:e9:eb:c7:a8:f0:8e:1a:77:f4:9d:0b:19:13: 01:3c:06:b4:b7:3b:d4:5f:14:cf:d5:8b:c4:13:bd: 1c:92:41:db:40:90:a5:cb:95:da:94:c3:9b:1f:23: ce:5e:ca:07:35:37:e8:6e:3b:03:f6:ad:ce:c1:78: f2:d7:2c:f6:ec:31:e5:d5:fb:40:60:10:b8:6b:9f: 8e:01:52:0c:81:6b:96:14:ae:01:60:90:af:eb:65: 6b:d8:1b:32:30:64:9a:1c:f9:82:9e:eb:61:96:b4: 0f:8e:07:e3:af:b3:95:f1:77:33:c3:36:0a:a2:66: 48:93:4c:6f:97:a7:0a:b4:27:12:c1:41:0c:90:6b: e1:07:61:eb:c9:0b:6e:cb:0b:e2:81:31:cb:53:90: d6:63:c4:35:70:fa:65:d6:f2:03:71:2d:ae:95:a5: 1a:9c:67:b5:ea:6a:f8:90:8e:b2:ca:f5:83:b9:5f: 65:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.184.0/23 45.131.33.0-45.131.34.255 91.218.240.0/24 91.224.142.0/23 109.95.88.0/21 109.196.80.0/20 109.197.36.0/23 109.207.103.0/24 185.178.236.0/22 IPv6: 2a0a:7080::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50247 Signature Algorithm: sha256WithRSAEncryption 02:e3:64:95:8f:71:20:48:5d:f5:5d:66:e8:88:af:a8:bc:43: 7d:e9:9e:f3:54:35:63:88:c8:fc:04:26:18:3d:79:43:b4:b8: 00:23:1b:b4:ec:49:cc:5f:b5:31:06:91:3f:7d:e1:7e:f1:d2: ce:c0:77:97:85:e2:90:70:6f:61:e8:f1:25:b3:e2:05:0a:db: 2f:03:bc:e9:1d:2f:af:c4:25:1f:49:bb:70:04:4d:d3:cf:a6: 8c:d3:6b:36:be:a1:35:6a:0a:1a:fc:29:fd:0c:a3:1d:1f:cb: 1f:1b:55:d2:7f:33:2c:21:0c:c1:5d:ec:c0:e1:8f:24:17:b5: 69:dc:25:d3:84:52:51:d8:cb:d9:90:e0:54:0c:44:7c:34:a9: bb:ba:51:13:0f:21:3d:9a:6c:81:5e:60:20:63:82:52:45:48: f8:4a:8c:70:a1:f6:c4:ba:a7:4e:48:c3:22:64:c3:cf:b9:8f: 4a:96:c7:60:a0:d9:e7:f7:76:60:22:a7:1d:cd:c8:78:18:3c: 21:ba:bf:30:77:3d:1c:5d:4f:f6:86:9e:b9:24:4a:a6:eb:e2: 92:ce:4a:45:c5:df:c0:2c:a8:fe:81:c7:9d:e5:0d:ce:1d:0e: 7e:09:4d:d3:f8:e7:6c:43:63:e3:7b:4c:4a:ef:8e:a9:af:1f: e0:52:f2:eb -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgISAZt/FdMEUVCTWyPZ/45uV2SSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGJkYzM3NmExNTlkMDVlMmFmOTcxNzZhM2ViYTgzNjBlNjBkMTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJVKxlVcsJxYOYtQUe3g+4o9jUoZ Rcz/npgDVBsUGphBNsoPs+NO+f0t8D/F0qZMsxplDmMzYa1ka5mLEb3y01JOf2tE xcmJRtyh4enrx6jwjhp39J0LGRMBPAa0tzvUXxTP1YvEE70ckkHbQJCly5XalMOb HyPOXsoHNTfobjsD9q3OwXjy1yz27DHl1ftAYBC4a5+OAVIMgWuWFK4BYJCv62Vr 2BsyMGSaHPmCnuthlrQPjgfjr7OV8XczwzYKomZIk0xvl6cKtCcSwUEMkGvhB2Hr yQtuywvigTHLU5DWY8Q1cPpl1vIDcS2ulaUanGe16mr4kI6yyvWDuV9lxQIDAQAB o4IC5zCCAuMwHQYDVR0OBBYEFLS9w3ahWdBeKvlxdqPrqDYOYNF2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UzLzQwZWEx NC1kYzUwLTRhYTAtYWE4NS0yOGQwMTA2MDM1MjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvNDBlYTE0 LWRjNTAtNGFhMC1hYTg1LTI4ZDAxMDYwMzUyOS8xL3RMM0RkcUZaMEY0cS1YRjJv LXVvTmc1ZzBYWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGCCsGAQUF BwEHAQH/BFcwVTBEBAIAATA+AwQBLVW4MAwDBAAtgyEDBAAtgyIDBABb2vADBAFb 4I4DBANtX1gDBARtxFADBAFtxSQDBABtz2cDBAK5suwwDQQCAAIwBwMFAyoKcIAw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAMRHMA0GCSqGSIb3DQEBCwUAA4IBAQAC 42SVj3EgSF31XWboiK+ovEN96Z7zVDVjiMj8BCYYPXlDtLgAIxu07EnMX7UxBpE/ feF+8dLOwHeXheKQcG9h6PEls+IFCtsvA7zpHS+vxCUfSbtwBE3Tz6aM02s2vqE1 agoa/Cn9DKMdH8sfG1XSfzMsIQzBXezA4Y8kF7Vp3CXThFJR2MvZkOBUDER8NKm7 ulETDyE9mmyBXmAgY4JSRUj4SoxwofbEuqdOSMMiZMPPuY9KlsdgoNnn93ZgIqcd zch4GDwhur8wdz0cXU/2hp65JEqm6+KSzkpFxd/ALKj+gced5Q3OHQ5+CU3T+Ods Q2Pje0xK746prx/gUvLr -----END CERTIFICATE-----Generated at Fri Feb 6 23:58:12 2026 by rpki-client